Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.7.1

Perform System Maintenance

Official citation: 3.7.1

Class: core · Severity: medium

Statement of the obligation — verify against source

3.7.1

What it means

Maintain your systems, addressing the security aspects of all maintenance — hardware, firmware, and applications — performed by any party, local or remote. This includes components not directly tied to data processing, such as scanners, copiers, and printers.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.